Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File: FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier: Kzqi87h3UOChuE27ICOCW6by6fgeIkRaDjCy5im1Kmw=
Subject key identifier: 41:8C:35:0E:C8:82:F2:D7:52:4A:D1:BC:6C:15:EF:64:52:29:CB:BB
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer: /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial: 01964F6D42EC7F212E3A453005FDBBA9F2ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number: 06DB
Signing time: Sat 19 Apr 2025 19:01:22 +0000
Manifest this update: Sat 19 Apr 2025 19:01:22 +0000
Manifest next update: Sun 20 Apr 2025 19:01:22 +0000
Files and hashes: 1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: 8XNa+BqrHz39s9/Lzxw9fks4Sk8XZLkgkGByxxcvH+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:42:ec:7f:21:2e:3a:45:30:05:fd:bb:a9:f2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
Validity
Not Before: Apr 19 19:01:22 2025 GMT
Not After : Apr 20 19:01:22 2025 GMT
Subject: CN=418c350ec882f2d7524ad1bc6c15ef645229cbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:da:53:fb:e0:86:b3:a0:75:dd:35:47:ac:
c7:03:34:6a:51:3b:67:19:78:af:e2:85:14:28:8a:
9a:ef:01:75:9c:87:09:47:fb:40:ca:1b:ca:7f:c3:
62:ab:d7:c6:18:25:b3:8f:dd:48:1b:2f:6a:1c:71:
54:9b:1e:06:6e:2a:08:64:8e:ca:40:3a:c5:9c:4d:
42:79:52:0d:97:99:c2:6e:5d:60:aa:ea:be:49:51:
14:cd:9a:58:28:e2:84:a1:9e:f3:73:e2:c7:73:dd:
9c:7b:ac:41:b4:fc:53:b1:93:d9:ca:c5:c9:0d:7e:
9d:19:89:2a:05:49:6a:94:14:65:ba:1e:22:2d:0a:
19:87:85:62:e2:57:94:c7:1d:e5:ea:aa:22:ca:be:
18:8d:70:8d:c7:67:0b:2e:4b:3a:e1:5a:cf:17:6c:
40:6a:5f:d3:eb:a4:f7:d4:ad:b1:08:88:82:46:15:
26:1d:c0:dd:3f:66:2a:73:08:cf:95:b9:dd:38:fa:
9a:71:44:d8:01:5f:84:7e:d9:18:cc:76:30:f3:19:
45:8e:99:5b:d9:59:fc:d3:d8:13:2c:dc:6b:53:e2:
39:8e:64:5b:f0:e9:f4:90:db:32:1c:02:6a:5c:de:
4d:86:a1:e4:35:7b:ef:76:a2:dc:a3:13:fc:fb:c8:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8C:35:0E:C8:82:F2:D7:52:4A:D1:BC:6C:15:EF:64:52:29:CB:BB
X509v3 Authority Key Identifier:
keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:27:1f:ce:1e:f3:68:33:5e:72:41:13:64:12:32:d6:c5:e1:
e0:5e:7b:4b:05:82:7b:bf:e5:a7:98:1c:2f:86:14:c7:6d:b7:
24:8a:ea:d1:37:23:cd:9e:b3:e7:5a:39:d8:1c:f6:31:cf:b4:
ed:15:04:98:7a:13:c5:5c:c1:54:ac:1a:82:21:92:58:12:25:
1a:47:ee:67:1a:88:88:4f:88:5a:8a:4d:e0:41:9e:cd:cc:44:
27:1c:7a:5d:da:bf:85:2f:35:a3:ba:55:78:55:96:44:e9:64:
9b:67:8e:c4:2f:15:51:a5:07:72:25:b4:fd:5c:c3:80:a9:54:
b0:8d:e8:a1:35:61:ce:18:c8:07:83:7e:56:96:ea:53:28:ba:
30:16:96:5b:2c:74:04:52:86:1b:15:76:db:74:fa:a9:69:56:
5f:98:f3:ba:16:49:c8:8d:36:cb:57:3b:88:53:ee:06:e0:73:
14:88:ba:f8:27:0d:7c:4c:dd:e6:0a:ee:40:8c:89:5b:61:d9:
6e:88:2c:49:1a:3e:20:ea:41:a4:77:cf:7a:b7:3a:72:88:80:
6f:98:80:92:ca:4c:b8:c4:16:94:b9:21:a6:1d:32:d3:5e:5c:
02:76:c8:a9:65:2b:82:35:d0:fa:d7:7a:c3:10:97:04:8f:f7:
02:b5:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:40 2025 by rpki-client